This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft File: 8H-pjVIdhMKNrsion3SIu86AAhU.mft (raw, json) Hash identifier: klvohHpk1qTD7CIvBENGcDKrijLUbeFAq1cNNjlIzbU= Subject key identifier: 66:C0:20:B9:50:5C:D8:49:27:7E:C4:53:73:45:70:5A:BA:16:F7:52 Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15 Certificate issuer: /CN=f07fa98d521d84c28daec8a89f7488bbce800215 Certificate serial: 019BF4D03B85345CFF3DCBDB57E49671700F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft Manifest number: 040B Signing time: Sun 25 Jan 2026 11:00:45 +0000 Manifest this update: Sun 25 Jan 2026 11:00:45 +0000 Manifest next update: Mon 26 Jan 2026 11:00:45 +0000 Files and hashes: 1: 8H-pjVIdhMKNrsion3SIu86AAhU.crl (hash: /i/dZz+mnrhUwzqzCLQ52P0Mx/w9jbRx8hDVdLLHU0g=) 2: 8_gr7ArTRAbIwtF4BAs2Yb1Q5X8.roa (hash: mNo3tCakCblgrlbHW+icbibgZLAMJGmCUvTiUz7GkBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:3b:85:34:5c:ff:3d:cb:db:57:e4:96:71:70:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215 Validity Not Before: Jan 25 11:00:45 2026 GMT Not After : Jan 26 11:00:45 2026 GMT Subject: CN=66c020b9505cd849277ec4537345705aba16f752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:1c:17:6b:a6:0d:66:f8:bc:dc:62:cb:f5: f4:0e:17:79:a7:5c:7e:40:22:70:0d:7c:e4:12:d4: bd:1a:e3:8f:48:16:ca:f5:33:f2:77:e0:9f:2d:10: 2b:5d:5f:1d:83:6c:cb:0d:c3:dd:45:e4:07:1f:51: ad:d0:dd:5f:18:d5:cc:e7:8f:96:6b:d0:d7:e4:ca: 0b:63:73:6b:70:32:5c:39:2b:08:dc:06:01:4e:99: 06:f5:7b:f8:55:d1:a2:72:12:b0:9d:b8:2d:7e:c7: e8:96:2b:90:4e:eb:1a:6a:c0:ab:f6:ad:4d:d9:4d: bf:a4:ca:a6:2b:2c:95:c8:10:0a:fd:4c:62:1c:6a: 83:95:04:17:23:ab:95:7f:75:54:f2:8f:66:41:09: 59:bf:3c:70:32:8d:0e:71:9c:b1:f7:a1:16:1a:6c: 5c:50:11:59:bf:58:b9:13:8f:8a:e8:d5:08:36:7b: e8:7a:bd:07:4e:5a:f7:4d:48:3d:d1:c1:90:4d:c5: 76:b5:3d:1c:8b:65:d8:7e:27:fc:4f:a5:c5:2e:03: 9a:04:cd:7e:5b:75:c9:f8:71:4a:b9:da:7d:9a:a4: 32:d8:2f:c4:3c:ca:72:80:9c:7c:29:41:70:a8:4c: 55:1a:46:de:7f:2d:ed:0d:f6:1f:a8:e7:82:05:4e: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C0:20:B9:50:5C:D8:49:27:7E:C4:53:73:45:70:5A:BA:16:F7:52 X509v3 Authority Key Identifier: keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3c:2a:c4:02:bb:66:d7:b5:14:08:27:d6:e2:28:d2:df:13: e4:8a:b9:48:2a:f5:81:57:90:7c:12:85:38:b8:9a:30:ef:35: 64:33:e7:42:8d:1d:27:ca:32:18:a9:46:bc:77:a6:43:7c:78: 66:f8:7b:05:6e:dd:9d:3b:10:68:89:54:f7:ec:d2:7e:ef:82: 51:e0:1e:4f:50:13:d8:0b:4e:df:f9:5e:ac:0c:d2:b8:2d:3a: fa:5e:a8:24:20:71:97:9f:d9:60:49:05:63:07:79:eb:dc:83: aa:d3:ec:b5:53:60:8e:76:7d:a4:03:8c:fd:49:cf:de:49:c2: 81:9c:d2:9e:70:0e:1f:00:14:c1:31:88:ff:94:fb:0f:ae:3a: d7:ec:86:e1:10:61:9c:35:08:0b:24:d3:51:d9:0a:e4:4d:55: 37:8e:ce:2d:58:44:0b:9c:d9:17:42:35:06:6d:50:50:36:d5: fd:72:b2:a3:e7:04:58:01:5d:6d:5c:64:64:28:1d:fd:c2:a5: 2d:ef:85:be:7e:91:56:f7:bc:2f:16:cb:a3:26:90:7d:61:70: b7:8a:0f:d1:56:a5:a3:12:3b:90:0a:47:eb:32:5c:27:8a:69: 1e:c0:93:8c:81:30:42:62:76:09:0a:98:5a:52:98:33:19:e3: 58:4a:ee:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00DuFNFz/PcvbV+SWcXAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwN2ZhOThkNTIxZDg0YzI4ZGFlYzhhODlmNzQ4OGJiY2U4 MDAyMTUwHhcNMjYwMTI1MTEwMDQ1WhcNMjYwMTI2MTEwMDQ1WjAzMTEwLwYDVQQD Eyg2NmMwMjBiOTUwNWNkODQ5Mjc3ZWM0NTM3MzQ1NzA1YWJhMTZmNzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pkcF2umDWb4vNxiy/X0Dhd5p1x+ QCJwDXzkEtS9GuOPSBbK9TPyd+CfLRArXV8dg2zLDcPdReQHH1Gt0N1fGNXM54+W a9DX5MoLY3NrcDJcOSsI3AYBTpkG9Xv4VdGichKwnbgtfsfoliuQTusaasCr9q1N 2U2/pMqmKyyVyBAK/UxiHGqDlQQXI6uVf3VU8o9mQQlZvzxwMo0OcZyx96EWGmxc UBFZv1i5E4+K6NUINnvoer0HTlr3TUg90cGQTcV2tT0ci2XYfif8T6XFLgOaBM1+ W3XJ+HFKudp9mqQy2C/EPMpygJx8KUFwqExVGkbefy3tDfYfqOeCBU5ghwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbAILlQXNhJJ37EU3NFcFq6FvdSMB8GA1UdIwQY MBaAFPB/qY1SHYTCja7IqJ90iLvOgAIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEgtcGpWSWRoTUtOcnNpb24zU0l1ODZBQWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMjVmODktNjM5Yi00ZjllLWFjOWQt N2Q5MjhjMTMxNzI0LzEvOEgtcGpWSWRoTUtOcnNpb24zU0l1ODZBQWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hMjVmODktNjM5Yi00ZjllLWFjOWQtN2Q5MjhjMTMxNzI0 LzEvOEgtcGpWSWRoTUtOcnNpb24zU0l1ODZBQWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjwqxAK7 Zte1FAgn1uIo0t8T5Iq5SCr1gVeQfBKFOLiaMO81ZDPnQo0dJ8oyGKlGvHemQ3x4 Zvh7BW7dnTsQaIlU9+zSfu+CUeAeT1AT2AtO3/lerAzSuC06+l6oJCBxl5/ZYEkF Ywd569yDqtPstVNgjnZ9pAOM/UnP3knCgZzSnnAOHwAUwTGI/5T7D6461+yG4RBh nDUICyTTUdkK5E1VN47OLVhEC5zZF0I1Bm1QUDbV/XKyo+cEWAFdbVxkZCgd/cKl Le+Fvn6RVve8LxbLoyaQfWFwt4oP0ValoxI7kApH6zJcJ4ppHsCTjIEwQmJ2CQqY WlKYMxnjWEruGQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:51 2026 by rpki-client